Lucene search
+L

1611 matches found

NVD
NVD
added 2022/09/16 6:15 a.m.29 views

CVE-2022-25696

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

8.4CVSS0.00084EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/09/16 6:15 a.m.4 views

CVE-2022-25696

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

8.4CVSS7AI score0.00084EPSS
Exploits0References2
Prion
Prion
added 2022/09/16 6:15 a.m.26 views

Race condition

Memory corruption in display due to time-of-check time-of-use race condition during map or unmap in Snapdragon Auto, Snapdragon Compute, Snapdragon Connectivity, Snapdragon Industrial IOT, Snapdragon Mobile, Snapdragon Wearables...

3.5CVSS7.1AI score0.00084EPSS
Exploits0References1
CVE
CVE
added 2022/09/16 5:25 a.m.67 views

CVE-2022-25696

CVE-2022-25696 is a memory-corruption issue in Qualcomm Snapdragon display paths caused by a time-of-check/time-of-use race during map or unmap in multiple Snapdragon line products (Auto, Compute, Connectivity, Industrial IOT, Mobile, Wearables). The RedHat/PRION/NT references confirm a Qualcomm ...

8.4CVSS7.1AI score0.00084EPSS
Exploits0References1Affected Software1
Tenable Nessus
Tenable Nessus
added 2022/09/06 12:0 a.m.42 views

Amazon Linux 2022 : tomcat, tomcat-admin-webapps, tomcat-el-3.0-api (ALAS2022-2022-044)

It is, therefore, affected by a vulnerability as referenced in the ALAS2022-2022-044 advisory. The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a...

7CVSS7AI score0.56636EPSS
Exploits16References3
RedHat Linux
RedHat Linux
added 2022/07/07 2:19 p.m.8 views

tomcat: local privilege escalation vulnerability

The fix for bug CVE-2020-9484 introduced a time of check, time of use vulnerability into Apache Tomcat 10.1.0-M1 to 10.1.0-M8, 10.0.0-M5 to 10.0.14, 9.0.35 to 9.0.56 and 8.5.55 to 8.5.73 that allowed a local attacker to perform actions with the privileges of the user that the Tomcat process is...

7CVSS7.2AI score0.56636EPSS
Exploits16References5
ATTACKERKB
ATTACKERKB
added 2022/07/01 12:15 a.m.4 views

CVE-2022-27904

Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use TOCTOU race-condition attack during the agent install process...

7CVSS7AI score0.00165EPSS
Exploits0References3
OSV
OSV
added 2022/07/01 12:15 a.m.7 views

CVE-2022-27904

Automox Agent for macOS before version 39 was vulnerable to a time-of-check/time-of-use TOCTOU race-condition attack during the agent install process...

7CVSS7.1AI score0.00165EPSS
Exploits0References2
Positive Technologies
Positive Technologies
added 2022/06/30 12:0 a.m.7 views

PT-2022-18679 · Automox · Automox Agent For Macos

Name of the Vulnerable Software and Affected Versions: Automox Agent for macOS versions prior to 39 Automox Agent for macOS versions prior to 37 Description: The issue is related to a time-of-check/time-of-use TOCTOU race-condition attack that can occur during the agent install process. It also...

7CVSS6.6AI score0.00165EPSS
Exploits0References6
Positive Technologies
Positive Technologies
added 2022/06/23 12:0 a.m.8 views

PT-2023-13379 · Dell · Dell Bios

Name of the Vulnerable Software and Affected Versions: Dell BIOS affected versions not specified Description: Dell BIOS contains a Time-of-check Time-of-use vulnerability. A local authenticated malicious user could potentially exploit this vulnerability by using a specifically timed DMA transacti...

7.5CVSS7.6AI score0.0016EPSS
Exploits0References6
OSV
OSV
added 2022/05/24 5:40 p.m.5 views

GHSA-QXP6-27GW-99CJ Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins

Due to a time-of-check to time-of-use TOCTOU race condition, the file browser for workspaces, archived artifacts, and $JENKINSHOME/userContent/ follows symbolic links to locations outside the directory being browsed in Jenkins 2.275 and LTS 2.263.2. This allows attackers with Job/Workspace...

5.3CVSS6.5AI score0.00899EPSS
Exploits0References3
Github Security Blog
Github Security Blog
added 2022/05/24 5:40 p.m.34 views

Time-of-check Time-of-use (TOCTOU) Race Condition in Jenkins

Due to a time-of-check to time-of-use TOCTOU race condition, the file browser for workspaces, archived artifacts, and $JENKINSHOME/userContent/ follows symbolic links to locations outside the directory being browsed in Jenkins 2.275 and LTS 2.263.2. This allows attackers with Job/Workspace...

5.3CVSS2.6AI score0.00899EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/05/23 7:16 p.m.4 views

CVE-2022-31466

Time of Check - Time of Use TOCTOU vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when th...

7CVSS5.8AI score0.00153EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/23 7:16 p.m.5 views

CVE-2022-31466

Time of Check - Time of Use TOCTOU vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when th...

7.9CVSS5.5AI score0.00153EPSS
Exploits0References2
NVD
NVD
added 2022/05/23 7:16 p.m.24 views

CVE-2022-31466

Time of Check - Time of Use TOCTOU vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when th...

7.9CVSS0.00153EPSS
Exploits0References1
Prion
Prion
added 2022/05/23 7:16 p.m.21 views

Design/Logic Flaw

Time of Check - Time of Use TOCTOU vulnerability in Quick Heal Total Security prior to 12.1.1.27 allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved through exploiting the time between detecting a file as malicious and when th...

4.4CVSS6.8AI score0.00153EPSS
Exploits0References1Affected Software1
Positive Technologies
Positive Technologies
added 2022/05/23 12:0 a.m.9 views

PT-2022-20743 · Quick Heal · Quick Heal Total Security

Name of the Vulnerable Software and Affected Versions: Quick Heal Total Security versions prior to 12.1.1.27 Description: A Time of Check - Time of Use TOCTOU issue allows a local attacker to achieve privilege escalation, potentially leading to deletion of system files. This is achieved by...

7.9CVSS6.7AI score0.00153EPSS
Exploits0References4
NVD
NVD
added 2022/05/18 4:15 p.m.27 views

CVE-2021-3969

A Time of Check Time of Use TOCTOU vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges...

7.8CVSS0.01879EPSS
Exploits0References1
OSV
OSV
added 2022/05/18 4:15 p.m.8 views

CVE-2021-3969

A Time of Check Time of Use TOCTOU vulnerability was reported in IMController, a software component of Lenovo System Interface Foundation, prior to version 1.1.20.3that could allow a local attacker to elevate privileges...

7CVSS7.1AI score0.01879EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2022/05/10 8:0 p.m.3 views

CVE-2021-26350

A TOCTOU race condition in SMU may allow for the caller to obtain and manipulate the address of a message port register which may result in a potential denial of service...

4.7CVSS5.3AI score0.00133EPSS
Exploits0References2
Rows per page
Query Builder